
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/5DC923B630ED11EE9A24D25BC4F9AE02.roa
File: 5DC923B630ED11EE9A24D25BC4F9AE02.roa (raw, json)
Hash identifier: Ucfo4Yf2WKDf+tPuuQ0HCtKIZnc9DEIRexIICBscDYg=
Subject key identifier: 83:AA:C7:CB:C3:8A:A2:E9:9D:C3:E3:C4:EB:27:F1:7D:64:2B:83:20
Certificate issuer: /CN=A9146ABC/serialNumber=574985E26D8C7716B09ED50319B4CE64961DE70D
Certificate serial: 01AA
Authority key identifier: 57:49:85:E2:6D:8C:77:16:B0:9E:D5:03:19:B4:CE:64:96:1D:E7:0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V0mF4m2MdxawntUDGbTOZJYd5w0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/5DC923B630ED11EE9A24D25BC4F9AE02.roa
Signing time: Wed 15 Oct 2025 06:29:54 +0000
ROA not before: Wed 15 Oct 2025 06:29:54 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 63018
IP address blocks: 103.133.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.crl
rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V0mF4m2MdxawntUDGbTOZJYd5w0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 03:13:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 426 (0x1aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146ABC, serialNumber=574985E26D8C7716B09ED50319B4CE64961DE70D
Validity
Not Before: Oct 15 06:29:54 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=68ef3f61-2c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d2:13:4c:ee:d6:8b:07:56:e9:fb:c2:ef:16:
57:a7:4c:ca:bb:df:e9:3b:f6:95:7b:ab:16:1b:ba:
57:4b:40:68:d8:ef:ea:a2:b8:b6:0c:33:62:33:5f:
f6:ac:28:ed:45:c3:9c:af:2f:68:4e:ce:15:f7:38:
1c:49:b2:de:59:da:86:aa:39:5b:69:4f:d6:00:a0:
de:05:59:f0:a7:33:fe:67:d3:78:03:28:8b:7a:3c:
b6:f1:19:5f:56:0d:dc:c3:a3:e3:89:16:e2:4b:2a:
f5:0e:c4:12:b4:6b:7b:c9:f4:9f:a3:17:bc:7e:bd:
6b:d2:d7:9e:2f:62:df:8a:b0:67:42:6b:ee:a9:14:
03:1d:e2:2c:53:54:94:de:e4:f9:21:5e:d0:a5:3b:
e8:b2:bd:8c:fe:9f:7d:70:a4:29:82:0f:3c:8c:9f:
39:28:15:35:41:91:47:a9:e1:ae:66:a3:42:53:c9:
39:50:ea:65:43:4a:df:c0:bd:87:4f:fb:8e:02:38:
2f:67:ca:cf:8e:ac:70:e8:74:11:82:51:f3:36:a4:
47:51:e0:e3:ca:ec:a6:ad:eb:68:c3:09:3f:b9:78:
ac:a3:b6:98:84:01:24:09:c1:6b:c4:38:51:9e:34:
26:a4:7c:d8:6b:00:26:7d:61:54:57:49:45:18:1e:
80:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AA:C7:CB:C3:8A:A2:E9:9D:C3:E3:C4:EB:27:F1:7D:64:2B:83:20
X509v3 Authority Key Identifier:
keyid:57:49:85:E2:6D:8C:77:16:B0:9E:D5:03:19:B4:CE:64:96:1D:E7:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V0mF4m2MdxawntUDGbTOZJYd5w0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/5DC923B630ED11EE9A24D25BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.133.191.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:5c:85:b4:be:7e:61:d1:eb:08:c1:39:67:e0:a4:93:76:4a:
e5:d8:84:43:9c:8f:eb:95:17:48:4c:e7:82:2f:f7:92:89:31:
cf:16:3c:21:18:7c:9d:f3:89:c7:32:1c:b8:e8:cc:1b:54:6e:
fc:a5:51:70:b5:4a:25:79:68:46:4b:6d:42:9a:57:9f:dd:c7:
39:49:3d:93:a6:2e:1f:e0:a3:69:70:92:11:d7:7a:c1:cb:98:
d8:79:12:70:f4:d8:74:d5:01:2f:1a:e9:db:a5:07:19:b3:22:
73:22:78:33:32:cc:dd:ce:cb:2d:36:4a:c4:f1:f0:cd:17:eb:
fe:ed:93:4b:e1:c0:b2:31:9f:ed:96:ad:9e:9a:ff:ce:f3:0f:
f8:88:86:98:60:de:00:8f:02:d3:22:b2:81:64:33:c4:2c:29:
d6:a9:2c:8e:91:64:ce:24:65:9d:d5:a3:28:45:81:b3:4e:28:
e2:e6:52:33:0c:ad:fe:c6:fe:94:e1:7c:d7:90:b3:52:00:22:
7c:a7:f1:1a:7b:8e:3d:ec:cf:4a:ae:3a:05:e3:1d:3e:6d:3f:
77:5f:07:1c:56:db:dc:f6:70:99:67:69:47:59:a9:db:11:49:
65:a5:70:73:69:66:60:57:c4:75:8a:e7:d0:ff:8f:b6:ed:9d:
a2:b2:76:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:35:25 2025 by rpki-client